question on locking down desktop access

From: arameth (arameth@swirve.com)
Date: 06/12/02


From: "arameth" <arameth@swirve.com>
Date: Wed, 12 Jun 2002 14:21:40 -0700


I'm attempting to lockdown access to a Win2k terminal
server running Citrix MF XP. We're using published apps to
totally avoid users having desktop access. However, when a
user saves a file in an application, they are able to
browse to certain areas via the "save as" dialog box that
we don't want them to see. Using a GPO I've hidden almost
every item that we want invisible (my documents, network
neighborhood, etc), except for one item. When the "save
as" dialog box pops up, it defaults to the 'desktop' item.
I want to either change this default 'save as' location to
a share (the only other visible item, located in 'my
computer'), or somehow hide everything on the desktop. I
can't have anything that will affect everyone (attrib +h
for all files, etc), as the admins for this server still
need desktop access, thus this is why we used a GPO. Any
ideas?

Thanks in advance!


Loading